Step 2: Create Visitor Entitlement Roles

In this step you will create Visitor Entitlement Roles based on the users and groups developed in Task 1: Setting Up Users and Groups.

1. Select Visitor Entitlements in the main navigation pane.

   

2. In the Visitor Entitlements Resource tree, right click Visitor Roles, and select Create Role.
3. Name the role EmployeeRole, and click Create.

   

   Note: The new role appears in italics until added to at least one group.

4. From the Visitor Entitlements Resource tree, click on the new EmployeeRole and select Add Groups to Role tab in the Editor pane.

   

5. Expand the InternalUsers group, and click the blue arrow next to the group called Employees.
6. Click the checkbox next to Employees, and select Add Group(s) to Role:

   

7. Select the Role Properties tab, and notice that Employees are now shown as a group within the role.
8. Repeat steps 2 and 3 to create two new roles: InternalRole and ExternalRole.
9. Repeat steps 4 and 5 to add the InternalUsers group to InternalRole.
10. Repeat steps 4 and 5 to add the ExternalUsers group to the ExternalRole.

You have created three roles predicated on group membership. The child groups are considered to fulfill the group membership of their parents. While MyEmployee is only a member of Employees, it is also a member of the group InternalUsers because the Employees group is a child of InternalUsers.